Code injection

2018-07-0322:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.0%

JSON

onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to delete arbitrary files via the Delete File(s) screen, as demonstrated by a ?i=var/www/html/&f=123.php&p=edit&p=deletefile URI.

CPENameOperatorVersion
onefilecmsle3.6.13

CPE	Name	Operator	Version
	onefilecms	le	3.6.13

References

github.com/Self-Evident/OneFileCMS/issues/49